Is this possible? It's not clear from the docs or from mailing list archives- most of the examples are with PSKs. I'm trying to connect to a Netscreen with RSA certs+Xauth so users can have IPs automatically assigned from a pool depending on their user type (as defined in their cert). thanks, sk